— Legal
Last updated: March 1, 2026. This is the plain-language version. If anything here contradicts the full legal terms in our DPA, the DPA wins.
Account data. Your name, email, and password hash. If you sign in with Google, we receive the profile fields Google shares (name, email, avatar).
Uploaded material. Any files, notes, or URLs you add to a StudyPod. This includes the extracted text and any generated notes, cards, and quizzes.
Usage data. Which topics you studied, quiz results, flashcard confidence, and chat interactions. We use these signals to compute mastery and drive adaptive study.
Device data. Standard server logs — IP, user agent, timestamps — retained for 30 days for security.
We use a small set of well-known vendors to host, process, and secure the service. The current list is on our Trust page, along with what each vendor does.
You can export all of your StudyPod data as JSON from Settings, and you can delete your account and all associated data with one click. Deletions propagate within 30 days across all systems, including backups. If you're covered by GDPR, CCPA, or similar law, you can also request a copy of your data by emailing privacy@studypod.app.
StudyPod on the consumer plan is intended for users 13 and older. Younger students access StudyPod only through a school or district license, which is governed by our K-12 DPA and complies with FERPA and COPPA.
Privacy questions: privacy@studypod.app. Data protection officer: dpo@studypod.app.